🖼️Redirect and iframe integration

Hosted redirect

Use a normal link or application navigation to open the generated widget URL.

<a
  href="https://widget.coindisco.com/?publicKey=pk_test_YOUR_PUBLIC_KEY"
  target="_blank"
  rel="noopener noreferrer"
>
  Buy or sell crypto
</a>

Embedded iframe

<iframe
  src="https://widget.coindisco.com/?publicKey=pk_test_YOUR_PUBLIC_KEY"
  title="Buy or sell crypto"
  width="450"
  height="700"
  allow="clipboard-write"
  style="border: 0; max-width: 100%;"
></iframe>

Use a responsive container in production:

<div class="coindisco-widget">
  <iframe
    src="https://widget.coindisco.com/?publicKey=pk_test_YOUR_PUBLIC_KEY"
    title="Buy or sell crypto"
    allow="clipboard-write"
  ></iframe>
</div>

<style>
  .coindisco-widget {
    width: min(100%, 480px);
    height: 700px;
  }

  .coindisco-widget iframe {
    width: 100%;
    height: 100%;
    border: 0;
  }
</style>

Security considerations

• Use the generated public widget key in browser code; never expose a private credential.

• Configure allowed origins in the dashboard.

• Use noopener noreferrer for new tabs.

• Do not append personal data to the URL unless the parameter is documented for that purpose.

• Validate wallet addresses in the partner application when the partner supplies them.